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Abstract 

We show how, given any set of generators of the stabilizer of a quantum code, 

an efficient gate array that computes the codewords can be constructed. For 

an n-qubit code whose stabilizer has d generators, the resulting gate array 

consists of O(nd) operations, and converts fc-qubit data (where k = n — d) 

into n-qubit codewords. 
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I. INTRODUCTION 



Recently, significant progress has been made in the development of error-correction 
schemes for quantum information systems |l 10 1 . This includes methods for converting 
classical error-correcting codes to into quantum error-correcting codes [@,[|, formalizations 
of necessary and sufficient conditions for sets of states to form quantum codes [|IT],0,|I^] , and 
a mathematical framework for a large class of quantum codes, known as stabilizer codes . 

In order to actually use quantum codes in quantum information systems, constructive 
methods for performing encodings, error- correct ion, and decodings are required. Towards 
this end, gate arrays that perform these computations are helpful. Methods for producing 
gate arrays that perform error-correction for any stabilizer code have been presented Jl3 



For computing encodings, the only gate arrays that have been proposed apply either to one 
specific code (such as one that encodes one qubit as five qubits and protects against a one- 
qubit error) [^,[f|,p!4| , or to restricted classes of stabilizer codes PJlQfl. In the present paper, 
we show how to efficiently construct a gate array that computes encodings for any stabilizer 
code. In the case of an n-qubit code defined in terms of d generators, our gate array consists 
of at most nd operations (which are all one- or two-qubit gates and performed in-place), 
and it converts /c-qubit data (where k = n — d) into n-qubit codewords. The gate array 
can be used for decoding by running it backwards (on a correct codeword). The method 
is illustrated throughout the paper using an n = 8, d = 5, k = 3 code (that can handle a 
one-qubit error) [[SHlOU; however, it works for any stabilizer code. 

We conjecture that the sizes of our gate arrays are asymptotically optimal for general 
stabilizer codes, though they may not be optimal for some specific stabilizer codes. 

In Section II, we review the basics of stabilizer codes, and introduce new terminology 
that will be useful later. In Section III, we explain how to use Gaussian elimination to 
convert codes into a "standard form." In Section IV, we show how to produce a gate array 
from a code in standard form. 
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II. STABILIZER CODES 



In [||,[| it has been shown that many quantum codes can be described in terms of their 
stabilizers. The stabilizer of a code is the set of all operators that: 
(a) are formed by taking tensor products of matrices of the form 




and 



(b) fix every codeword. 

Thus, the codewords form the +l-eigenspace of the operators in the stabilizer. An error 
that anticommutes with an operator M in the stabilizer will take a codeword from the +1- 
eigenspace of M to the — 1-eigenspace of M. The new state can be distinguished from the 
old state, and hopefully corrected, by measuring the eigenvalue of M. If the operators in 
the stabilizer are chosen carefully, a large class of errors can be corrected — for instance, all 
errors operating on a single qubit or up to t qubits. 

The stabilizer of a code is always a group. It can be most easily described by a set of 
generators G\, . . . , Gd- The other elements of the stabilizer are products of various G^s. The 
actual choice of generators is somewhat arbitrary, as long as none of them is the product 
of other generators. Any tensor product of /, X, Y, and Z will square to ±1, but in order 
to have eigenvalues +1, the generators must actually square to +1. In addition, in order to 
have a nontrivial joint + 1-eigenspace, the generators must commute with each other, so the 
stabilizer is an Abelian group. 

Generators for an eight qubit code that protects a three qubit state with up to one error 
(as explained in j8HT0l) are 

G! = X(g)X(g)X®X(g)X(g)X(g)X(g)X 
G 2 =Z(g)Z(g)Z®Z(g)Z(g)Z(g)Z(g)Z 

G 3 = X® I ®X® I ® Z ®Y ® Z (g)Y (1) 
G 4 = X® I ®Y <g> Z ® X <g> I (g)Y <g> Z 
G 5 = X <g> Z ® / ®Y <g> I ®Y <g> X <g> Z . 
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Once we know the generators G%, . . . , Gd, we have most of the vital information about 
the code. If there are n qubits and d generators, we can encode k = n — d data qubits. By 
measuring the eigenvalue of each of the d generators, we can learn what, if any, error has 



occured, and fix it. In it is explicitly shown how to do this in a fault-tolerant way. If 
we do not require strict fault-tolerance, the array to identify the error syndrome has 0(nd) 
gates. Once the error syndrome is determined, it may take a long classical computation to 
determine the actual error, depending on the code used. 

In order to actually encode states using a quantum code, we need to decide which states 
will act as basis states for the coding space. In order to do this, it is convenient to use the 
language of binary vector spaces, as in ||. Define the X -vector of the generator 



d = Gn ® G 



i2 



® G m , 



as the n-bit vector, denoted as X G ., where 



(X Gi ) j 



1 if Gn = X or Y 
if Gu = I or Z. 



The Z-vector of Gi, denoted as Zq., is defined as 



(X 



1 if Gt 



Z or Y 



G, 



[ if Gij = I or X. 

Also, the X-matrix of generators G±, . . . , Gd is defined as the n x d matrix, denoted as Xq, 
where 



' 1 if G^ = X or Y 
if G^ = I or Z, 

(that is, the matrix whose columns are X Gl , . . . , X Gd ). The Z -matrix of Gi, . . . , Gd, denoted 



j' 



as Z G , is defined similarly. Note that the X- and Z-matrices together completely determine 
the sequence of generators that they correspond to. 

The X- and Z-matrices for the aforementioned generators ([!]) of the eight-qubit code are 



X, 



G 



/ 1 1 1 1 \ 

1 

10 110 

1 1 

10 10 

10 10 1 

10 11 

Vi o i o o/ 



J G 



/0 1 0\ 

10 1 

10 10 

10 11 

110 

110 1 

1110 

Vo i i i 1/ 



(2) 



Note that columns 1, 3, 4, 5 of Xq are linearly independent, while column 2 is null. In 
general, we will call generators whose X-vectors are linearly independent primary genera- 
tors ("type 1" in the language of ||), and generators whose X- vectors are null secondary 
generators ("type 2" in the language of ||). (It is possible to have sets of non-null X- vectors 
that are not linearly independent; however, as discussed in ||, the generators can always be 
transformed so that they consist of primary and secondary types.) 

To choose the codewords, we augment these generators with a set of k seed generators 
(where k = n — d), which are chosen so that: 

(a) the X-vectors of the seed and primary generators are linearly independent; and 

(b) each seed generator commutes with each secondary generator. 

Let Mi, . . . , M b , L%, . . . , L r , and Aq, . . . , be the primary, secondary, and seed generators, 
respectively (where b + r = d). Then, as shown in |J, each fc-qubit basis state \c\ . . . c^) can 
be associated with a quantum codeword 

n 

^ J2 M?.-.MpN?---N c k *\0^}, (3) 

ai^.a^ejO,!} 6 

(and, by linear extension, this defines the codeword for an arbitrary A;-qubit state). Note 
that these 2 fc basic codewords are all valid quantum states and are mutually orthogonal, since 
condition (a) implies that the states M" 1 • ■ ■ M^N^ 1 ■ ■ ■ A^ fc |0 . . . 0) for a\, . . . , at,, c\, . . . , G 
{0, 1} are all distinct basis states. Also, the basic codewords are all fixed by the stabilizer 
(i.e., they lie within the specified code). To see why this is so, it is useful to note that 

n 

j=g(I + M 1 ) ■ ■ ■ (I + M b )N? ■ ■ -N?\ 0^0) (4) 

is equivalent to (|]). Expression ([|) is fixed by each primary generator Mj, because 
Mi ■ (I + Mi) = (M{ + /), and is fixed by each secondary generator Lj, because 

L r (j= s (I + M 1 ).-.(I + M b )N?...N?\0...0)) 

= j=(I + M 1 )...(I + M b )N?...N?.L ] \0...0) 
= -j=(I + Ml )---(I + M b )N?---N c k k \0...0), 
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where we are using the fact that Lj commutes with each seed generator (condition (b)). 

In ||, methods for constructing generators and seeds for a variety of codes are given, 
including the following seeds for the eight qubit code ([[]), (0): 

N 1 = X®X®I®I®I®I®I®I 

N 2 = X®I®X®I®I®I®I®I (5) 

N 3 = X(g)I(g)I(g)I(g)X(g)I(g)I(g)I. 



It has been shown \TE\ that any set of primary and secondary generators can be efficiently 
augmented with seed generators. We shall present a related method for constructing seed 
generators that takes advantage of the generators being in a special form. 



The resulting basic codewords for the eight qubit code are written out in full in P,|TU 
For large codes, it is impractical to explicitly write out the basic codewords. For instance, 
one of the codes from |§ is a sixteen qubit code that protects ten qubits against one error. 
The code is described by six generators and ten seed generators. If written out in full, this 
code consists of 1,024 codewords, each of which is a superposition of 32 basis states (which 
amounts to 32,768 basis states in total!). 

An alternative is to produce a gate array that transforms basis states into codewords. 
This, in addition to specifying the code, indicates how encodings might be computed by 
quantum computers. The orthogonality of the codewords implies that the mapping of k- 

qubit states to n-qubit codewords can, in principle, be implemented unitarily (technically, 

d 

the unitary transformation would map n-qubit states of the form \c% . . . cj.) ® | . . . ) to n- 
qubit codewords). This does not imply that the unitary transformation can be implemented 
efficiently by a gate array (for example, with a polynomial number of operations with respect 
to n). A direct conversion of the 2 h basic codewords (each of which is a superposition of 2 b 
basis states) into a gate array would generally result in an exponential number of operations. 

The expression (^) is equivalent to (£]) and is apparently simpler in that it contains no 
exponentially large sums; however, it is not clear how to translate this into a gate array, 
since operations of the form + are not unitary. 
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III. CONVERTING GENERATORS INTO STANDARD FORM 



Let Gi, . . . , G d be generators of the stabilizer of some n-qubit code. We shall show how 
to systematically convert the matrices X G and Zq into a standard form which is very useful 
for producing codewords. From this form, a set of primary and secondary generators, as well 
as a suitable set of seed generators, are readily available. More importantly, we shall show 
in the next section how to convert a set of generators in standard form into a gate array of 
size 0{nd) that transforms &-qubit states (where k = n — d) into codewords. 

Our conversion will involve transformations which change a generator Gi into Gi • Gj, 
where j ^ i. Since the stabilizer is a group, it is unchanged by such a transformation on the 
generators. In terms of the X- and Z-matrices, such an operation adds the jth column to 
the ith column in both matrices (in modulo 2 arithmetic), which is a basic step in Gaussian 
elimination. We shall also allow the n qubit positions to be reordered, which corresponds 
to a reordering of the rows in both matrices (another basic step in Gaussian elimination). 
This reordering is not strictly necessary, but is convenient for notational purposes; it clearly 
does not change the characteristics of the code. 

Let and denote the original X- and Z-matrices (Xq and Zq) of the generators 
(they are each n x d matrices). We shall perform a suitable Gaussian elimination on these 
matrices, and then augment them with columns corresponding to seed generators leading to 
what we shall call a standard form. 

By performing Gaussian elimination on X^°\ we can obtain matrices of the form 



x m = " + 



'0 A'' 
v° I, 



z m = r + k{ - 



'B C x 
X D E, 



<•{ 

where b is the rank of X(°\ r = d — b, and k = n — d. At this stage, the Z-matrix Z^ has 
no special form. Next, by performing Gaussian elimination on the first r + k rows and the 
first r columns of Z^\ we can transform B, the (r + k) x r submatrix of Z^\ into B' of the 
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form 



B' 



■'■2 { 

r\ { 



\ 



V 



B x 
B 2 
/ 

where r 1 is the rank of B and r 2 = r — r x . Note that this does not affect the last b rows 
or the first r columns of Thus, the resulting forms of the X- and Z-matrices (blocked 
with the new partition) are 



/ 



r-2 



n 



X (2) 



k { 

T2 { 

n { 



Ai 

A 2 

A 3 

0/ 



Z (2) 



T2 { 

ri { 



Bi Ci 

B 2 C 2 

o / c 3 

Di D 2 E 



The first r = T\ + r 2 columns correspond to secondary generators, and the last b columns 
correspond to primary generators (it is clear that the last b columns of are linearly 
independent). 

Next, we shall augment these matrices with k columns corresponding to k seed generators. 
Recall that the properties that the seed generators must have are: their X- vectors are linearly 
independent of those of the primary generators; and, they commute with the secondary 
generators. Let the X- and Z-matrices of the seed generators be 

k k 



X (s) 



■'■2 { 
T\ { 

»{ 



1 I ^ 



B\ 
V / 



T2 { 

ri { 



^0^ 



V / 



where Bf is the transpose of B\. It is clear that the X- vectors of these seed generators 
are linearly independent of those of the primary generators (that is, the columns of X^ 



are linearly independent of the last b columns of X^). To see why these seed generators 
commute with the secondary generators, note that this condition is equivalent to having 
an even number of l's in their X- vectors in common with the Z- vector of each secondary 
generator. This is equivalent to 



{(I Bi 





n 





Si 





B 2 





I 





D 2 



k { 



which holds because B\ + B\ = (modulo 2). 

The augmented matrices and Z^*\ which include the seed, secondary, and primary 
generators, are as follows. 



T% { 

n { 



I 



T 

B\ 








b 








A, 








A 2 








A 3 








I 



T2 



Z {*) 



r 2 { 
ri { 



/ 



V 










B x 

B 2 C 2 

o / c 3 

D 1 D 2 E j 



(6) 



Call any specification of generators in the above form a standard form. Note that there are 
0(nd) l's in each matrix. 

As an example, consider the generators for the eight qubit code described in the previous 
section (represented by the matrices of equations (0)). A standard form for this code is 



/I 











1 


1 


1 














1 
















1 








1 


1 





1 













1 





1 





1 








1 





1 





1 


1 













1 


1 





1 





1 


1 


1 








1 


1 


1 


z (*) = 











1 


1 


1 




















1 






















1 


1 


1 


1 


1 

















1 



















1 


1 








1 




















1 
















1 





1 


1 





Vo 




















1/ 




Vo 








1 








1 


1/ 



(7) 



(with k — 3, r\ — 1, T2 = 0, and 6 = 4), where the fourth and fifth qubit positions (rows) 
have been transposed in the Gaussian elimination process. Modulo this transposition, the 
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last five columns generate the same stabilizer as the original five generators. The first 
three columns correspond to seed generators, the fourth column corresponds to a secondary 
generator, and the last four columns correspond to primary generators. The seed generators 
are not the same as those presented in Eq. (||), so the basis codewords will be different. 
However, since the stabilizer is the same, the full coding space is the same as before. 



IV. CONSTRUCTION OF GATE ARRAYS 

We shall construct a n-qubit gate array with 0(nd) operations that computes the map- 
ping 



|ci...c fc >® |0...0>~^ £ M?---MpN?---N c k *\0...0). (8) 

a 1 ...a b £{0,l} b 

This mapping (13) is the composition of two mappings, 

d r 

|ci . . . cjfe) <g> |(T?~0) ^ \c 1 ...c k ) <g> |0T^0) <g> 4y Y, W...a b ) (9) 



/2 s 

a 1 ...a b £{0,l} b 



and 



|d . . . c fc ) ® I . . . 0) ® \a x . . . o 6 > ^ Mf 1 ■ • • M^iVf ■ • • iV fc Cfc | . . . ). (10) 

The first mapping @ is trivially computed by independently applying a Q operation to 
each of the last b qubits, where 

To compute the second mapping (|T0|), it is helpful to consider the eight qubit code, whose 
standard form is given by (0) in the previous section. Recall that the first three columns 
specify the seed generators and the last four columns specify the primary generators. Let 
us temporarily consider a simplified version of the generators specified in (^), where phase 
shifts are ignored. This is equivalent to keeping as is and setting to all zeros (thus, 
Z's become J's, Y's become X's, and X's and Fs are unchanged in the tensor products that 
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make up the generators). With respect to these generators, the mapping (|I0D is given by 
matrix X^*' as 



/Ci\ 




/I 











1 


1 


1 






( C1 \ 


c 2 







1 








1 


1 





1 




c 2 


c 3 










1 





1 





1 


1 




c 3 







1 


1 


1 








1 


1 


1 









i — > 














1 













ai 


a 2 



















1 










a 2 


a 3 






















1 







«3 


\a 4 / 


\o 




















1/ 


\o 4 / 



(11) 



where we are denoting the input state \c1C2C3) (g> |0) <E> (01020304) and the output state as 
column vectors (the phases are all +1 here). This mapping is computed by the following 
gate array (where we are using notation of ||16|| ). 



Cl 

c 2 
c 3 


Ol 

a>2 

«3 



( 


1 


k 




5— ( 


3 — 






( 


• ( 

f— ( 


)— ( 

5 — ■ 


) — 


— ( 


) — 






— 


— $ 


— ( 


)— ( 


) — 


— £ 


5— ( 






5— ( 


5— ( 


) — 


« 


1 








« 


1 








• 

1 


1 



Figure 1 

By inspection, we can see how the operations in the gate array correspond to the entries of 
matrix X^*\ What we have done is to apply each column conditioned on one of its elements. 
For instance, if 03 = 1, we apply the third primary generator by flipping the first, third, and 
fourth qubits. We can only do this if the seventh qubit, which initially has the value 03, has 
not been changed before we get around to applying that generator. If an earlier column had 
a 1 in the seventh row, that qubit might have been changed before it could be used. This 
is why we needed to put the X-matrix in standard form — each column of the matrix must 
be conditioned on the input of the corresponding qubit, so the diagonal elements must be 
first in their rows. A matrix in standard form has this property (at least for columns not 
corresponding to secondary generators), while a more general matrix does not. 
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Returning to our goal of implementing the mapping (|T0|) with phase shifts included, we 
make the following observations about phase shifts and conditional phase shifts acting on 
basis states with phase ±1. 

(a) The action of a conditional phase shift or conditional negation depends on the state, but 
not on the phase of the state, to which it is applied. 

(b) The action of a phase shift, or conditional phase shift, may affect the phase, but does 
not change the state on which it acts. 

This implies that the phase shifts can be essentially inserted into Figure 1 as they occur in 
matrix Z^*>; they do not affect the evolution of the state, but they do affect an evolving 
phase factor of ±1. In the case of the eight qubit code, we insert conditional phase shifts 
into Figure 1 in accordance with the matrix Z^ of (0) to obtain the following gate array. 



ci 
c 2 
c 3 


«2 



CD CD CD 



Y 



CD CD Z-Y -^^} 



Z 



Z 



a 3 — \Z 

0,4 • 



z-z-z 



z 



Y — 



z 



z — 



Figure 2 

Of course, the fact that X ■ Z = Y is used here. We have done essentially the same thing 
here as with the X-matrix, conditioning the phases on specific qubits. Notice, for example, 
that the phase factors conditioned on a\ correspond to the generator of the fifth column of 
Z^*\ Also, recall that we exclude the secondary generators, so that the fourth column of 
is ignored. Strictly speaking, the initial Z's for ax, a 3 , and 04 are also conditioned on 
those qubits. However, since Z has no effect on |0), we can apply it as an unconditional 
operation. 

The gate array of Figure 2 computes the mapping fllOD for the eight qubit code, and 
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such a gate array can be constructed in general from any matrices and Z^*> in standard 
form. 

Finally, a full gate array for computing codewords is obtained by composing the opera- 
tions for mappings (§) and ([U]). In the case of the eight qubit code, we obtain the following 
(where R = Q • Z). 



input 



CD CD CP 



Y 



CD CD CD Z-Y -O-O 



— R 



— Q 



Z 



— R 



y^> 



z-z-z 



— R 



Y — 



> codeword 



Z 



z — 



Figure 3 

In general, the total number of two-qubit operations is bounded by 

nk + (n- 1)6 < (n - l)d 

and the number of one-qubit operations is bounded by b < d. Thus, the total number 
of operations is bounded by nd, which is essentially the length of the description of the 
generators of the stabilizer. For the eight qubit code, there are four one-qubit operations 
and 23 two-qubit operations. For the sixteen qubit code mentioned in Section II, the gate 
array will have no more than 96 operations. 

To recover messages from their codewords, it suffices to apply the codeword error- 
correction scheme proposed in [|13|] (without fault-tolerance, if not required) followed by 
the gate array for encoding (e.g. Figure 3) backwards. 
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